ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Clef - Two-factor authentication from the future.

    IT Discussion
    2
    10
    1.3k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      Alex Sage
      last edited by

      https://vimeo.com/103148853

      https://getclef.com/

      1 Reply Last reply Reply Quote 0
      • scottalanmillerS
        scottalanmiller
        last edited by

        Their site is a bit terse. It uses the touch id on the iPhone, that part is good. It can call back to pin. What do you do when you lose your phone (like I did two weeks ago?)

        A 1 Reply Last reply Reply Quote 1
        • A
          Alex Sage @scottalanmiller
          last edited by Alex Sage

          @scottalanmiller said:

          What do you do when you lose your phone (like I did two weeks ago?)

          http://support.getclef.com/article/32-what-should-i-do-if-my-phone-is-lost-or-stolen

          scottalanmillerS 2 Replies Last reply Reply Quote 0
          • scottalanmillerS
            scottalanmiller @Alex Sage
            last edited by

            @anonymous said:

            @scottalanmiller said:

            What do you do when you lose your phone (like I did two weeks ago?)

            http://support.getclef.com/article/32-what-should-i-do-if-my-phone-is-lost-or-stolen

            So you are screwed. "Get a news device" isn't an acceptable fallback solution for those of us who travel internationally. Imagine telling your CEO "well, you've lost all access until you can get to a place with a replacement phone."

            1 Reply Last reply Reply Quote 1
            • scottalanmillerS
              scottalanmiller
              last edited by

              It's a neat idea, but there needs to be a cumbersome fallback in case of emergencies.

              1 Reply Last reply Reply Quote 2
              • scottalanmillerS
                scottalanmiller
                last edited by

                They say that the authentication tools can be install on tablets but it is not supported. What weirdness is going on that they care about the size of the device and not the OS? This concerns me a little. Are there other dependencies that they are not disclosing? Like a working cell signal in additional to WiFi?

                1 Reply Last reply Reply Quote 0
                • scottalanmillerS
                  scottalanmiller
                  last edited by

                  When my phone went into the water, my office had to disable all of my two factor remotely because there was no fallback. The only fallback was to go to normal passwords. At least there was a fallback. But it only worked because there was a central admin able to shut it off remotely.

                  1 Reply Last reply Reply Quote 0
                  • scottalanmillerS
                    scottalanmiller @Alex Sage
                    last edited by

                    @anonymous said:

                    @scottalanmiller said:

                    What do you do when you lose your phone (like I did two weeks ago?)

                    http://support.getclef.com/article/32-what-should-i-do-if-my-phone-is-lost-or-stolen

                    how does this work if your email is Clef protected? You lose the ability to deactivate!!

                    1 Reply Last reply Reply Quote 0
                    • scottalanmillerS
                      scottalanmiller
                      last edited by

                      They might have answers, but the more I look at this, the less it feels thought through. As someone who travels, the severe risk of losing access is something I am always thinking about. Losing email, texting, phone, web, etc. all at once is terrifying. You can't book flights, get a rental car, pay your bills, contact a bank, etc. It's very scary.

                      1 Reply Last reply Reply Quote 0
                      • scottalanmillerS
                        scottalanmiller
                        last edited by

                        If you are dealing with really high security stuff where you'd rather burn your data than have any risk at all of it being compromised, then I could see this making sense. But nearly everyone needs access more than they need security. This feels like putting yourself at risk of at least issues if not crisis to protect against something less likely to happen.

                        Nearly everyone I know has lost a phone at some point (broken to some degree.) Or just had a phone die on them. I know almost no one who has had major systems hacked. Both happen often, but one is, I feel, many times more common.

                        1 Reply Last reply Reply Quote 0
                        • 1 / 1
                        • First post
                          Last post